Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Re: Remove the pic use flag in the hardened amd64 profile.
Date: Sun, 27 Feb 2011 13:04:39
Message-Id: 1c6d733717c27bb379a198e804723d28.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] Re: Remove the pic use flag in the hardened amd64 profile. by Magnus Granberg
1 2011.Február 27.(V) 13:54 időpontban Magnus Granberg ezt írta:
2 > On Sunday 27 February 2011 10.11.58 Ryan Hill wrote:
3 >> On Sun, 27 Feb 2011 09:20:57 +0100
4 >>
5 >> klondike <franxisco1988@×××××.com> wrote:
6 >> > 2011/2/27 Ed W <lists@××××××××××.com>:
7 >> > > On 26/02/2011 18:01, Magnus Granberg wrote:
8 >> > >> If you have read the last meeting we will be removing the pic use
9 >> flag
10 >> > >> as default on in the hardened amd64 profile. We will start with the
11 >> > >> changes when
12 >> > >> the new structure to the profiles have settled down.
13 >> > >
14 >> > > Hi, any chance of a bit of background on this change? ie the "why"
15 >> and
16 >> > > some of the implications?
17 >
18 > Most of the asm code is in libs and on amd64 it need to be PIC friendly
19 > from
20 > the start. We don't need to disable asm code. We do that most times with
21 > the
22 > pic use flag on hardened profile.
23 >
24 > /Magnus
25
26 I'm still running Hardened on x86. I'm thinking of the optimal time to
27 switch to amd64. Is it better from the security point of view?
28 I assume, that it's easier to make amd64 asm code PIC-aware because of the
29 higher number of available registers.
30
31 Dw.
32 --
33 dr Tóth Attila, Radiológus, 06-20-825-8057
34 Attila Toth MD, Radiologist, +36-20-825-8057
35
36 >> >
37 >> > Summing it up a lot, amd64 usually needs not special asm code for PIC
38 >> > due to the way the ABI is defined (which means being PIC by default
39 >> > usually).
40 >>
41 >> You summed it up too much. Why does this need to change?
42 >

Replies